zhihu-publisher

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). 运行时会读取 ./.zhihu-publish-output/draft/latest-draft.md（包含用户提供的正文/图片URL/链接等自由文本）并在 preview 中把网络图片原始 URL 和 HTML 正文渲染到 ./.zhihu-publish-output/preview/latest.html，从而将对手作者的自由文本喂给下游 LLM/浏览器渲染链路（潜在间接提示注入/恶意内容呈现风险）。

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). Flagged because the skill can invoke runtime installation of the image uploader from a remote git package using "npx skills add zhihu/zhihu-mediacloud-uploader.git -g", which fetches and installs remote code and is required for upload functionality.